The Restrict User Access – Ultimate Membership & Content Protection plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.5 via API. This makes it possible for unauthenticated attackers to obtain the contents of posts and pages via API.
References
Configurations
History
08 Apr 2026, 19:19
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
11 Mar 2025, 13:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3037773%40restrict-user-access%2Ftrunk&old=3010745%40restrict-user-access%2Ftrunk&sfp_email=&sfph_mail= - Patch | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/f67684cd-3e0f-48bb-967a-16ea2b027843?source=cve - Third Party Advisory | |
| First Time |
Dev.institute restrict User Access
Dev.institute |
|
| CPE | cpe:2.3:a:dev.institute:restrict_user_access:*:*:*:*:*:wordpress:*:* | |
| CWE | NVD-CWE-noinfo |
21 Nov 2024, 08:47
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3037773%40restrict-user-access%2Ftrunk&old=3010745%40restrict-user-access%2Ftrunk&sfp_email=&sfph_mail= - | |
| References | () https://www.wordfence.com/threat-intel/vulnerabilities/id/f67684cd-3e0f-48bb-967a-16ea2b027843?source=cve - |
13 Mar 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-13 16:15
Updated : 2026-04-08 19:19
NVD link : CVE-2024-0687
Mitre link : CVE-2024-0687
CVE.ORG link : CVE-2024-0687
JSON object : View
Products Affected
dev.institute
- restrict_user_access
CWE